← back
CVE-2011-4922

CVE-2011-4922

EPSS 0.3%
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://hg.pidgin.im/pidgin/main/rev/8c850977cb42http://openwall.com/lists/oss-security/2012/01/04/13https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223http://www.pidgin.im/news/security/?id=50